[keycloak-user] Using Keycloak admin client on a web browser

[Geoffrey Cleaves]

Any user agent that can call a REST API can perform admin tasks. See this
documentation: https://www.keycloak.org/docs-api/4.6/rest-api/index.html

Since the admin password would be plainly visible in the HTML code executed
by the web browser, and not knowing more about your architecture, this
sounds like an extremely bad idea.

Instead, I believe your web browser should communicate with your own
backend, and your backend should perform the admin tasks. This way the
admin password will not be visible in the HTML code.

Regards,
Geoffrey Cleaves

On Tue, 4 Dec 2018 at 10:41, Vikram Eswar <vikram.eswar at gmail.com> wrote:

> Hi all,
>
> is it possible to implement a keycloak admin client to add / delete/ update
> users from a web browser or is it just available for node js ? If it is
> possible with a browser, could someone please give me some support on how
> to do that ?
>
> Regards,
> Vikram
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>